Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
File:                     saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json)
Hash identifier:          SA4G8B+0wMOfYmk3gNSJBnJo/wnknw/vllBMpDnWX9w=
Subject key identifier:   5E:A7:8A:06:F7:3D:94:9C:30:DA:F3:80:B8:53:8C:F0:A9:0F:9F:F8
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Certificate issuer:       /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
Manifest number:          0864
Signing time:             Sat 04 Apr 2026 20:30:04 +0000
Manifest this update:     Sat 04 Apr 2026 20:30:03 +0000
Manifest next update:     Sat 11 Apr 2026 20:30:03 +0000
Files and hashes:         1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: kDWLwazflYOvBAOc0Pg5D2JcSdZa9IIt3T9ZoyRyZWQ=)
                          2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: 77hSYKp5nGJ1Gv+W5zbAX2pAyRbbfZvgk88uHWf8l8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
                          rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
        Validity
            Not Before: Apr  4 20:30:03 2026 GMT
            Not After : Apr 11 20:30:03 2026 GMT
        Subject: CN=69d174cc-1f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:f9:3a:dd:fe:ac:03:0b:c0:6d:dc:32:29:
                    49:2f:8b:97:8b:25:11:17:44:33:82:e1:ea:06:4f:
                    ab:c1:da:4e:82:fd:6f:3a:8d:ee:fc:21:e2:04:37:
                    a1:b5:75:3c:9f:cd:71:ae:1c:3c:e1:86:fd:ae:30:
                    0a:28:d1:5c:e4:5f:8a:57:d5:ad:eb:48:19:9c:77:
                    b4:06:fe:43:e7:36:25:68:1e:6d:29:fe:8b:a9:eb:
                    37:0c:a7:44:00:22:ab:9c:5f:72:e0:66:a6:be:5a:
                    36:c2:28:c1:a8:b3:c0:75:55:a3:0e:25:88:15:f9:
                    b4:3d:0b:de:67:66:56:69:c7:25:de:c9:30:ff:10:
                    10:b6:82:4b:c7:41:2f:f1:31:a1:b2:a3:77:be:f9:
                    17:3a:92:84:12:9b:7a:a6:ac:ec:7b:2f:21:d0:3f:
                    84:d4:4c:f4:b7:57:5c:70:a4:9e:73:cc:a9:a3:41:
                    cf:cf:91:79:da:05:94:65:76:df:eb:20:01:85:17:
                    63:7f:04:53:8b:a5:31:55:c3:86:2e:5d:c2:bf:d4:
                    32:4b:20:50:c8:6d:06:b5:a2:e9:f1:76:44:0d:0c:
                    60:17:5c:71:0e:09:4b:e6:86:ae:28:7f:c5:c5:15:
                    be:ea:78:07:fa:d6:96:9a:ee:fc:2a:0f:e3:f1:29:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A7:8A:06:F7:3D:94:9C:30:DA:F3:80:B8:53:8C:F0:A9:0F:9F:F8
            X509v3 Authority Key Identifier:
                keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:51:75:04:45:c8:5a:11:b1:21:62:2b:85:1d:02:ce:1b:f8:
         69:39:c7:17:97:26:65:e0:5d:a3:34:29:76:1d:ec:b3:23:5a:
         5c:36:55:d1:c5:01:54:07:68:0c:e5:a7:d9:b0:f1:87:d7:88:
         10:4d:81:4f:68:00:3d:36:18:c0:d9:68:b1:f1:84:71:07:cd:
         1b:ce:7b:a2:32:84:84:29:1f:dd:46:8d:9e:8f:76:cb:17:5e:
         12:db:78:40:e6:13:15:14:65:61:04:26:3c:93:2f:97:e5:1d:
         eb:95:51:48:fa:20:0f:b5:00:3d:81:2a:ac:c2:8c:58:65:a5:
         2e:83:c9:7e:73:e8:b6:cc:d1:03:0b:b7:db:60:8a:2e:1b:82:
         c6:c5:83:e3:8d:e0:31:e5:e3:77:db:55:3a:cf:c8:b9:30:0a:
         b2:bf:a2:5d:c5:c1:73:ed:e2:8d:d1:ed:88:ca:59:51:da:00:
         4a:d4:81:e4:4a:8b:04:ba:eb:3f:7a:93:67:dc:90:ab:0d:0f:
         e6:ab:12:27:32:94:10:fe:fc:fd:4d:4d:2a:46:f3:a3:70:5e:
         5c:a1:9f:6d:8b:f2:13:dd:d7:ec:79:c1:cf:0d:8e:5a:c8:db:
         ce:96:a4:15:69:dc:20:ff:4e:17:24:c2:21:51:d2:89:b3:3c:
         f0:2d:4c:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFBRjIxMTAvBgNVBAUTKEIxQTE4QzIwNjc3NThGRThDOTIxOTgxRThCMTFGQTMw
OEU2MjY5M0IwHhcNMjYwNDA0MjAzMDAzWhcNMjYwNDExMjAzMDAzWjAYMRYwFAYD
VQQDEw02OWQxNzRjYy0xZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkdP5Ot3+rAMLwG3cMilJL4uXiyURF0QzguHqBk+rwdpOgv1vOo3u/CHiBDeh
tXU8n81xrhw84Yb9rjAKKNFc5F+KV9Wt60gZnHe0Bv5D5zYlaB5tKf6Lqes3DKdE
ACKrnF9y4Gamvlo2wijBqLPAdVWjDiWIFfm0PQveZ2ZWaccl3skw/xAQtoJLx0Ev
8TGhsqN3vvkXOpKEEpt6pqzsey8h0D+E1Ez0t1dccKSec8ypo0HPz5F52gWUZXbf
6yABhRdjfwRTi6UxVcOGLl3Cv9QySyBQyG0GtaLp8XZEDQxgF1xxDglL5oauKH/F
xRW+6ngH+taWmu78Kg/j8SlEwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6nigb3
PZScMNrzgLhTjPCpD5/4MB8GA1UdIwQYMBaAFLGhjCBndY/oySGYHosR+jCOYmk7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUFGMi84MjI2QUI3MkY3
MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWotakpJWmdlaXhINk1JNWlh
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NhR01JR2Qxai1qSklaZ2VpeEg2TUk1aWFUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUFGMi84MjI2QUI3MkY3MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWot
akpJWmdlaXhINk1JNWlhVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM1F1BEXIWhGxIWIrhR0Czhv4aTnHF5cmZeBdozQpdh3ssyNaXDZV0cUBVAdo
DOWn2bDxh9eIEE2BT2gAPTYYwNlosfGEcQfNG857ojKEhCkf3UaNno92yxdeEtt4
QOYTFRRlYQQmPJMvl+Ud65VRSPogD7UAPYEqrMKMWGWlLoPJfnPotszRAwu322CK
LhuCxsWD443gMeXjd9tVOs/IuTAKsr+iXcXBc+3ijdHtiMpZUdoAStSB5EqLBLrr
P3qTZ9yQqw0P5qsSJzKUEP78/U1NKkbzo3BeXKGfbYvyE93X7HnBzw2OWsjbzpak
FWncIP9OFyTCIVHSibM88C1Mmw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:33 2026 by rpki-client